password protecting the trampoline controller action